Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/arASJ_T5PdR88aKJFloTzR7fUMM.roa
File: arASJ_T5PdR88aKJFloTzR7fUMM.roa (raw, json)
Hash identifier: 0SkNJZayW5PZld0Ke1/7bLtfT5B2lNp46opX8GsPWhg=
Subject key identifier: 6A:B0:12:27:F4:F9:3D:D4:7C:F1:A2:89:16:5A:13:CD:1E:DF:50:C3
Certificate issuer: /CN=f2b1dafc45588242bf9ae105c91ae883a1c403b3
Certificate serial: 018CC795462F1FCFF3B6DF91B0E3A5421641
Authority key identifier: F2:B1:DA:FC:45:58:82:42:BF:9A:E1:05:C9:1A:E8:83:A1:C4:03:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rHa_EVYgkK_muEFyRrog6HEA7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/arASJ_T5PdR88aKJFloTzR7fUMM.roa
Signing time: Tue 02 Jan 2024 00:31:37 +0000
ROA not before: Tue 02 Jan 2024 00:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47270
IP address blocks: 91.212.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:46:2f:1f:cf:f3:b6:df:91:b0:e3:a5:42:16:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2b1dafc45588242bf9ae105c91ae883a1c403b3
Validity
Not Before: Jan 2 00:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ab01227f4f93dd47cf1a289165a13cd1edf50c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:42:e6:8d:e9:a7:d6:5e:09:f7:95:e3:7b:
76:17:11:b3:86:f2:04:71:6b:42:fe:7c:69:6b:69:
4a:59:68:ad:9c:63:da:a9:2e:16:4a:6e:ef:66:4a:
bf:65:89:f6:6f:c5:4b:e0:8b:3c:5b:39:bd:a2:44:
ac:54:41:bb:62:90:2c:79:30:44:98:cf:62:f5:09:
b2:c5:33:2f:7b:20:51:3f:ac:4c:48:4a:71:98:80:
1f:6c:94:59:39:35:e5:54:80:9a:db:11:6c:94:6e:
46:24:5f:41:3e:2d:31:fc:5b:23:1d:78:ae:b8:2a:
65:ca:5a:4a:e0:4a:10:48:32:68:fc:46:9f:14:9d:
a4:04:d5:68:38:e3:74:f1:42:33:7d:bb:05:c2:60:
81:2d:7a:6a:26:e0:ea:8f:73:52:6d:37:8b:08:9e:
d9:d9:c6:d1:78:cc:d5:83:99:65:b1:6e:c9:86:b3:
3a:6a:d3:e0:3d:b5:95:b0:a3:b0:8d:63:4b:42:58:
d3:31:18:98:40:ce:f7:8c:a2:e7:ea:66:ab:e9:ef:
60:2f:1e:17:d5:d3:48:57:e6:a1:a7:b1:46:21:5a:
df:43:f4:58:cc:05:65:2c:15:42:78:ed:00:95:88:
f2:e1:26:e4:5f:21:6d:2a:9f:36:05:5a:50:99:30:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B0:12:27:F4:F9:3D:D4:7C:F1:A2:89:16:5A:13:CD:1E:DF:50:C3
X509v3 Authority Key Identifier:
keyid:F2:B1:DA:FC:45:58:82:42:BF:9A:E1:05:C9:1A:E8:83:A1:C4:03:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rHa_EVYgkK_muEFyRrog6HEA7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/arASJ_T5PdR88aKJFloTzR7fUMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/350f54-f50b-458e-ac8a-dd558da69bd7/1/8rHa_EVYgkK_muEFyRrog6HEA7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.61.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ae:84:19:bd:75:dd:a9:89:e1:4b:10:98:34:b5:e7:05:40:
e2:6d:49:64:29:e0:18:c0:5b:52:90:dd:2c:9a:f7:94:ef:06:
b8:1d:2e:f2:73:f5:6f:ee:bf:79:a2:89:78:be:8b:7d:97:da:
a6:a7:dd:ea:23:cb:49:5a:01:1d:28:bc:0a:0c:0c:bf:f9:20:
9e:52:04:c4:ee:b1:d1:c6:d2:f7:5f:5c:8b:30:fe:8e:4f:c3:
fd:e1:f5:08:ae:3a:7b:3e:3c:a1:eb:ae:39:14:f1:a1:e1:fa:
ab:5a:cd:08:b1:9e:e9:f3:29:6b:a8:44:0e:8d:57:ee:de:91:
d5:04:bf:f3:2a:a4:63:c6:4e:c5:8b:99:be:9f:e1:9a:27:29:
05:6c:24:6d:f9:28:3c:9b:f6:4e:24:a1:0a:bc:de:59:fb:da:
76:2e:a9:fb:8b:8e:9c:55:ad:b4:ef:ea:6a:ef:94:5c:73:74:
ce:c9:cf:cc:91:6f:c5:63:69:b9:f2:0b:93:1b:0b:a9:3d:c2:
14:a0:95:9e:73:80:71:a1:93:84:80:fc:c2:2f:ef:54:a5:80:
ab:45:ba:ca:cd:3c:3a:a6:94:50:cd:e6:f6:42:01:3f:bb:f9:
6e:89:7c:ad:a9:a4:67:05:10:91:14:0b:3f:72:b5:df:02:ed:
1b:08:29:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlUYvH8/ztt+RsOOlQhZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYjFkYWZjNDU1ODgyNDJiZjlhZTEwNWM5MWFlODgzYTFj
NDAzYjMwHhcNMjQwMTAyMDAzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWIwMTIyN2Y0ZjkzZGQ0N2NmMWEyODkxNjVhMTNjZDFlZGY1MGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib5C5o3pp9ZeCfeV43t2FxGzhvIE
cWtC/nxpa2lKWWitnGPaqS4WSm7vZkq/ZYn2b8VL4Is8Wzm9okSsVEG7YpAseTBE
mM9i9QmyxTMveyBRP6xMSEpxmIAfbJRZOTXlVICa2xFslG5GJF9BPi0x/FsjHXiu
uCplylpK4EoQSDJo/EafFJ2kBNVoOON08UIzfbsFwmCBLXpqJuDqj3NSbTeLCJ7Z
2cbReMzVg5llsW7JhrM6atPgPbWVsKOwjWNLQljTMRiYQM73jKLn6mar6e9gLx4X
1dNIV+ahp7FGIVrfQ/RYzAVlLBVCeO0AlYjy4SbkXyFtKp82BVpQmTACDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGqwEif0+T3UfPGiiRZaE80e31DDMB8GA1UdIwQY
MBaAFPKx2vxFWIJCv5rhBcka6IOhxAOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHJIYV9FVllna0tfbXVFRnlScm9nNkhFQTdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNTBmNTQtZjUwYi00NThlLWFjOGEt
ZGQ1NThkYTY5YmQ3LzEvYXJBU0pfVDVQZFI4OGFLSkZsb1R6UjdmVU1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNTBmNTQtZjUwYi00NThlLWFjOGEtZGQ1NThkYTY5YmQ3
LzEvOHJIYV9FVllna0tfbXVFRnlScm9nNkhFQTdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9Q9MA0G
CSqGSIb3DQEBCwUAA4IBAQAFroQZvXXdqYnhSxCYNLXnBUDibUlkKeAYwFtSkN0s
mveU7wa4HS7yc/Vv7r95ool4vot9l9qmp93qI8tJWgEdKLwKDAy/+SCeUgTE7rHR
xtL3X1yLMP6OT8P94fUIrjp7Pjyh6645FPGh4fqrWs0IsZ7p8ylrqEQOjVfu3pHV
BL/zKqRjxk7Fi5m+n+GaJykFbCRt+Sg8m/ZOJKEKvN5Z+9p2Lqn7i46cVa207+pq
75Rcc3TOyc/MkW/FY2m58guTGwupPcIUoJWec4BxoZOEgPzCL+9UpYCrRbrKzTw6
ppRQzeb2QgE/u/luiXytqaRnBRCRFAs/crXfAu0bCCmX
-----END CERTIFICATE-----
Generated at Mon Mar 25 18:04:26 2024 by rpki-client on console-ams.rpki-client.org